fff96ec49ad7f3b4cc0656f63274baf71a21e234cf8b169b91da79b2a5dc2168 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1113e827c154c71d83eed71e0c72840N.exe
Size

89KB
Sample

240820-nyt69azdqf
MD5

d1113e827c154c71d83eed71e0c72840
SHA1

6c24ba05cdf24610ebaadfca8b84f0be6b1d22ae
SHA256

fff96ec49ad7f3b4cc0656f63274baf71a21e234cf8b169b91da79b2a5dc2168
SHA512

c6222441006b03b79785f5d6f175171a3b968026e616680acdaabb29f55437aa041c89d60d08ffed33a0c9e34f4e7b471f5632ab1b9402b84ecf83ff291ed26d
SSDEEP

1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7t5m0m698+Q+oYSiHYSiF:6e7WpP9oVLQthbYY9oVLQthbUrt7t5mJ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d1113e827c154c71d83eed71e0c72840N.exe
- Size
  
  89KB
- MD5
  
  d1113e827c154c71d83eed71e0c72840
- SHA1
  
  6c24ba05cdf24610ebaadfca8b84f0be6b1d22ae
- SHA256
  
  fff96ec49ad7f3b4cc0656f63274baf71a21e234cf8b169b91da79b2a5dc2168
- SHA512
  
  c6222441006b03b79785f5d6f175171a3b968026e616680acdaabb29f55437aa041c89d60d08ffed33a0c9e34f4e7b471f5632ab1b9402b84ecf83ff291ed26d
- SSDEEP
  
  1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7t5m0m698+Q+oYSiHYSiF:6e7WpP9oVLQthbYY9oVLQthbUrt7t5mJ
Score

9^/10

discovery ransomware
- Renames multiple (2912) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware